WLC 5508 - Ignoring Primary discovery request received on non-management interface (2) from AP

Hello,
Im receving this error on my syslog server:
capwap_ac_sm.c:1443 Ignoring Primary discovery request received on non-management interface (2) from AP
already checked the configuration and everything seems ok. They are registered and with clients associated.
What could be the cause?
Thanks in advance,
Chris

Thanks Scott for your fast response.
No, I'm not using LAG.
What do you mean with separate AP Managers?
I have one AP Manager on vlan 100 (10.100.0.25) and the Management interface on the same Vlan (10.100.0.26)
And users use vlan 150 (10.150.0.x).
The switch port where the AP is plugged is configured with:
interface GigabitEthernet2/0/20
switchport access vlan 100
switchport mode access
spanning-tree portfast
On WLC I can also check the AP history:
Last Error Occurred Reason            Layer 3 discovery request not received on management interface

Similar Messages

  • Ignoring discovery request - AP on dynamic client interface

    Hi All,
    I have a questing regarding the AP Management Port on the 5508.
    At our customers side there are some FAT-APs and we want to migrate them to the controller.
    There is no DHCP Service active on the network (security-restriction by our customer) and the FAT-APs and Clients are configured with a static IP.
    There is no LAG active everything is on Port 1.
    Now after upgrading one AP to lightwight-mode,... he cannot discover his WLC (thats ok, because the Manament Interface is in a different subnet)
    So I configured a IP-Helper and the neccesary udp-Port to get the AP joined on the WLC.
    But on the Controller I get the following message:
    %CAPWAP-3-DISC_INTF_ERR2: Ignoring discovery request received on a
    wrong VLAN ([dec]) on interface ([int]) from AP
    [hex]:[hex]:[hex]:[hex]:[hex]:[hex]
    The wrong VLAN in the message is a dynamic Interface on the Controller for client and the AP is in that Subnet.
    It its created as an Dynamic Interface on the WLC (without "Enable Dynamic AP Management")
    I hope you can give me a hint. I'm not sure if I should enable "Dynamic AP Management" on that Client Interface.
    By the way, the AP can join when i configure the Controller IP via console on it. But that should not be the solution
    Thanks &
    Best regards,
    Simon

    Hi Nicolas,
    thanks for your reply.
    I know, that this design is not "best practice".
    Our customer has a LAN which has to be completly redesigned.
    They use very huge subnets for their different production segments (255.255.240.0) and everything is in there.
    The Autonomous AP Installation is in one of these huge network segments where the APs and the clients are in the same subnet..
    Thats the background why this szenario is created.
    I know that this design is absolutly unsatisfactory.
    But thats the fact and I have to deal with this.
    The helper is the WLCs Management Adress.
    So what about the "ignoring discovery request" message.
    Is there some possibility to get it work this way or is the only way to upgrade the APs via Console to get them to the controller.
    I know the best way would be to get the APs in a new different subnet,...
    regards,
    Simon

  • Discovery request received on wrong VLAN

    I am setting up a new 4404 with my existing WLAN. I have a combo for 1100 and 1200 APs, on two different VLANs, with WDS on each VLAN and a WLSE. One of the VLANs is on the same subnet was the WLC management port. The other WLAN VLAN is not. I am able to join the VLAN on the same subnet to my WLC but when I convert one of my auto APs on the other VLAN, it converts but never joins my WLC. If I run a debug on the WLC I get the following.
    Fri Aug 1 12:38:56 2008: 00:17:0f:37:68:60 Received LWAPP DISCOVERY REQUEST from AP 00:17:0f:37:68:60 to ff:ff:ff:ff:ff:ff on port '1'
    Fri Aug 1 12:38:56 2008: Discovery Request received on wrong VLAN '160' on interface '1', management VLAN = '0' - in L3 mode, dropping the packet.
    My WLC is on code 5.0.148. All of my APs have static IP addresses. I have setup DNS but NOT DHCP since all of them have static IP and that option 42 still confuses me. Any thoughts? My 4506 is set to trunk the port the WLC is on. I even tried to only apply the two VLANs to that port. My WLC can ping the IP of the AP on the different VLAN and my AP can ping the WLC.

    You need to configure the native vlan on the trunk port to vlan 160. Looks like the packet is being tagged as vlan 60 and your management interface is set to '0' which is untagged.

  • Discarding Primary discovery request in LWAPP

    Hi,
    after upgrading our WISM module from version 6 to version 7, we are constantly getting these error messages with syslog:
    Jun 20 12:37:02 wism2.xxxx.sk WiSM2: *spamReceiveTask: Jun 20 11:37:02.632: %LWAPP-6-CAPWAP_SUPP_VER: spam_lrad.c:1821 Discarding Primary discovery request in LWAPP from AP 00:25:b4:da:99:c0 supporting CAPWAP
    There is one interesting thing about this log message - there is no AP with the MAC addess "00:25:b4:da:99:c0" in our infrastructure, but the VLAN SVI interfaces on the Cisco 6500, where the WISM module in installed, are using this "00:25:b4:da:99:c0" MAC address.
    Any idea what might be wrong?

    As far as I'm concerned, your problem was that you had an AP that was not on its primary WLC at the time of the messages. I don't think discovery mechanisms have anything to do with it.
    Prior to like 5.X, you defined Primary WLC only by Name. As such, the AP sent to every IP address it knew of for discovery....  since then, you define Primary WLC by Name, plus an Ip address, but this does not restrict primary discovery to that IP (maybe it should?)
    Is there any scenario where you would have had an AP on the wrong controller last week?  WLC down? LAN failure? Over subscribed WLC?   
    Perhaps we could get some low priority bugs to enhance the message now.... maybe there already is one....    Either way, the message is what it is.   Even if you saw a message that says it dropped the lwapp, you shouldnt care what AP that is, it just means there is one sending primary discoveries...
    If you like the message now because you want to know what APs are sending primary discoveries, that should be handled by a proper message in syslog like "AP XXXX is sending primary discovery requests, it is not on its Primary WLC".....   but then you'd flood your syslog if you have purposely took down a WLC.....      I actually think this message you are seeing in syslog should be removed as well,, since you'll likely see a ton of them if you also lose a primary wlc....

  • WLC 5508 running 7.4.110.0 unable to tftp upload config from controller

    Hi,
    Two WLC 5508 running identical code version. One is 50 license Primary, the second is HA. Identical config on both. HA WLC can upload its config to the TFTP or FTP server but Primary cannot. The operation fails for  both CLI and GUI and for different protocols i.e. TFTP, FTP.
    #### Primary Controller
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.4.110.0
    Bootloader Version............................... 1.0.20
    Field Recovery Image Version..................... 7.6.95.16
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... PRODWC7309
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    Redundancy Mode.................................. Disabled
    IP Address....................................... 10.1.30.210
    Last Reset....................................... Power on reset
    System Up Time................................... 18 days 18 hrs 51 mins 35 secs
    System Timezone Location......................... (GMT+10:00) Sydney, Melbourne, Canberra
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... AU - Australia
    Operating Environment............................ Commercial (0 to 40 C)
    --More-- or (q)uit
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +34 C
    External Temperature............................. +17 C
    Fan Status....................................... OK
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 8
    Number of Active Clients......................... 138
    Memory Current Usage............................. Unknown
    Memory Average Usage............................. Unknown
    CPU Current Usage................................ Unknown
    CPU Average Usage................................ Unknown
    Burned-in MAC Address............................ 3C:08:F6:CA:52:20
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Present, OK
    Maximum number of APs supported.................. 50
    (Cisco Controller) >debug transfer trace enable
    (Cisco Controller) >transfer upload start
    Mode............................................. TFTP
    TFTP Server IP................................... 10.1.22.2
    TFTP Path........................................ /
    TFTP Filename.................................... PRODWC7309-tmp.cfg
    Data Type........................................ Config File
    Encryption....................................... Disabled
    *** WARNING: Config File Encryption Disabled ***
    Are you sure you want to start? (y/N) Y
    *TransferTask: Jun 02 10:41:15.183: Memory overcommit policy changed from 0 to 1
    *TransferTask: Jun 02 10:41:15.183: RESULT_STRING: TFTP Config transfer starting.
    TFTP Config transfer starting.
    *TransferTask: Jun 02 10:41:15.183: RESULT_CODE:1
    *TransferTask: Jun 02 10:41:24.309: Locking tftp semaphore, pHost=10.1.22.2 pFilename=/PRODWC7309-tmp.cfg
    *TransferTask: Jun 02 10:41:24.393: Semaphore locked, now unlocking, pHost=10.1.22.2 pFilename=/PRODWC7309-tmp.cfg
    *TransferTask: Jun 02 10:41:24.393: Semaphore successfully unlocked, pHost=10.1.22.2 pFilename=/PRODWC7309-tmp.cfg
    *TransferTask: Jun 02 10:41:24.394: tftp rc=-1, pHost=10.1.22.2 pFilename=/PRODWC7309-tmp.cfg
    pLocalFilename=/mnt/application/xml/clis/clifile
    *TransferTask: Jun 02 10:41:24.394: RESULT_STRING: % Error: Config file transfer failed - Unknown error - refer to log
    *TransferTask: Jun 02 10:41:24.394: RESULT_CODE:12
    *TransferTask: Jun 02 10:41:24.394: Memory overcommit policy restored from 1 to 0
    % Error: Config file transfer failed - Unknown error - refer to log
    (Cisco Controller) >show logging
    *TransferTask: Jun 02 10:41:24.393: #UPDATE-3-FILE_OPEN_FAIL: updcode.c:4579 Failed to open file /mnt/application/xml/clis/clifile.
    *sshpmReceiveTask: Jun 02 10:41:24.315: #OSAPI-3-MUTEX_FREE_INFO: osapi_sem.c:1087 Sema 0x2b32def8 time=142 ulk=1621944 lk=1621802 Locker(sshpmReceiveTask sshpmrecv.c:1662 pc=0x10b07938) unLocker(sshpmReceiveTask sshpmReceiveTaskEntry:1647 pc=0x10b07938)
    -Traceback: 0x10af9500 0x1072517c 0x10b07938 0x12020250 0x12080bfc
    *TransferTask: Jun 02 10:39:01.789: #UPDATE-3-FILE_OPEN_FAIL: updcode.c:4579 Failed to open file /mnt/application/xml/clis/clifile.
    *sshpmReceiveTask: Jun 02 10:39:01.713: #OSAPI-3-MUTEX_FREE_INFO: osapi_sem.c:1087 Sema 0x2b32def8 time=5598 ulk=1621801 lk=1616203 Locker(sshpmReceiveTask sshpmrecv.c:1662 pc=0x10b07938) unLocker(sshpmReceiveTask sshpmReceiveTaskEntry:1647 pc=0x10b07938)
    -Traceback: 0x10af9500 0x1072517c 0x10b07938 0x12020250 0x12080bfc
    #### HA Controller
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.4.110.0
    Bootloader Version............................... 1.0.20
    Field Recovery Image Version..................... 7.6.95.16
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... PRODWC7310
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    Redundancy Mode.................................. Disabled
    IP Address....................................... 10.1.31.210
    Last Reset....................................... Software reset
    System Up Time................................... 18 days 19 hrs 1 mins 27 secs
    System Timezone Location......................... (GMT+10:00) Sydney, Melbourne, Canberra
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... AU - Australia
    Operating Environment............................ Commercial (0 to 40 C)
    --More-- or (q)uit
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +34 C
    External Temperature............................. +17 C
    Fan Status....................................... OK
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 4
    Number of Active Clients......................... 0
    Memory Current Usage............................. Unknown
    Memory Average Usage............................. Unknown
    CPU Current Usage................................ Unknown
    CPU Average Usage................................ Unknown
    Burned-in MAC Address............................ 3C:08:F6:CA:53:C0
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Present, OK
    Maximum number of APs supported.................. 500
    (Cisco Controller) >debug transfer trace enable
    (Cisco Controller) >transfer upload start
    Mode............................................. FTP
    FTP Server IP.................................... 10.1.22.2
    FTP Server Port.................................. 21
    FTP Path......................................... /
    FTP Filename..................................... 10_1_31_210_140602_1050.cfg
    FTP Username..................................... ftpuser
    FTP Password..................................... *********
    Data Type........................................ Config File
    Encryption....................................... Disabled
    *** WARNING: Config File Encryption Disabled ***
    Are you sure you want to start? (y/N) y
    *TransferTask: Jun 02 10:51:31.278: Memory overcommit policy changed from 0 to 1
    *TransferTask: Jun 02 10:51:31.278: RESULT_STRING: FTP Config transfer starting.
    FTP Config transfer starting.
    *TransferTask: Jun 02 10:51:31.278: RESULT_CODE:1
    *TransferTask: Jun 02 10:52:05.468: ftp operation returns 0
    *TransferTask: Jun 02 10:52:05.477: RESULT_STRING: File transfer operation completed successfully.
    *TransferTask: Jun 02 10:52:05.477: RESULT_CODE:11
    File transfer operation completed successfully.
    Not upgrading to 7.4.121.0 because of bug CSCuo63103. Have not restarted the controller yet.
    Any one else had this issue ? Is there a workaround ?
    Thanks,
    Rick.

    Thanks Stephen, In my deployments of 7.4.110.0 version I have not seen this issue so may be controller reboot will fix it (we do have HA to minimize the impact). I will keep the thread updated with findings and may request TAC for the special release 7.4.121.0 if the still not happy with 7.4.110.0
    Rick.

  • Using xsgl:insert-request to insert non-English character data from HTML form

    I tried to insert a text written in French and pasted into an HTML form into my database following the recipe from the XSQL release notes.
    The table:
    create table content_object (
    id number(9) constraint pk_content_object primary key,
    author number(9),
    title varchar2(256),
    abstract varchar2(1024),
    object_type_id number(9),
    content_meat clob,
    XML file the form is posted to:
    <?xml version="1.0"?>
    <xsql:insert-request connection="demo"
    xmlns:xsql="urn:oracle-xsql"
    table="content_object"
    transform="article_form_to_content_object.xsl"/>
    article_form_to_content_object.xsl:
    <?xml version = '1.0'?>
    <ROWSET xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xsl:version="1.0">
    <xsl:for-each select="request/parameters">
    <ROW>
    <TITLE><xsl:value-of select="title_field"/></TITLE>
    <ABSTRACT><xsl:value-of select="abstract_field"/></ABSTRACT>
    <CONTENT_MEAT><xsl:value-of select="content_field"/></CONTENT_MEAT>
    </ROW>
    </xsl:for-each>
    </ROWSET>
    The result was:
    <ROW num="2">
    <ID>6</ID>
    <TITLE>Le go</TITLE>
    <ABSTRACT>Vin bouchonn</ABSTRACT>
    <CONTENT_MEAT>Des conditions de conservation au tant d</CONTENT_MEAT>
    </ROW>
    All strings were cropped at the point where the first accented character appeared.
    Any idea why this is happening? With English texts it works just fine.
    Maciej

    Another user hit this problem this week. I debugged it and posted the reply in the discussion thread:
    http://technet.oracle.com:89/ubb/Forum11/HTML/002799.html
    It's a JDK bug in character set conversion that has a simple workaround, just indicate the ISO-8859-1 encoding on your XSQL page. See the end of this other thread for details.

  • WLC 5508 AP-Manager interface

    Hi, I own a WLC 5508 and I (probably) do not understand AP-Manager interfaces. I have a lab with 2x 1242AG and 1x 1252AG connected to c2960. APs are in vlan 10 (192.168.10.0/24, configured via DHCP), APs are connected to "switchport mode access" interface. c2960 is connected via a trunk to c4506, and WLC is plugged in gi1/3 and gi1/4 (both through twingig). Both ports are configured as "switchport mode trunk". Management interface on WLC is on WLC port 8 (connected to gi1/4), and AP-Manager is on WLC port 1 (connected to gi1/3). Management interface on WLC has "Dynamic AP management" set to disabled, and AP-Manager has it set to enabled. Both, Management and AP-Manager interfaces are tagged, vlan id 12 and 13 (subnets 192.168.12.0/24, 192.168.13.0/24) respectively. APs receive their IP configuration via DHCP (server located in vlan 20, 192.168.20.0, ip helper-address in use), and try to discover WLC by DNS resolution (CISCO-CAPWAP-CONTROLLER.some.domain resolves to AP-Manager IP correctly). But APs do not join to controller, WLC says "Ignoring discovery request received on non-management interface", AP has "not joined" status in Monitor/Statistics/AP Join.
    But if I set management interface as "Dynamic AP enabled", and change DNS to resolve CISCO-CAPWAP-... to it's IP everything works fine - AP joins at once. Please help, how to join LAP to AP-Manager interface? Join to WLC manager is simple, but my design requires at least 2 AP-Manager interfaces.

    Hello,
    I just wanted to mention foremost; a split LAG configuration is not supported on the WLCs.  This "can" be achieved if you are splitting your LAG ports amongst VSS configuration on your two capable devices, but is not a recommended or supported configuration. I would highly suggest a LAG configuration over your individual port.  As far as the "ap-manager" concern you have of managing more than 48 APs, you are correct in that the AP-manager cannot handle more than 48 APs, however only when in an individual port configuration.  The LAG will overcome this limitation.
    George was correct about your DNS entry, this needs to point to the WLC's management interface.  This is why the AP joined when you pointed the DNS entry back to the management address-- as intended.
    This link is anchored to the mgmt, ap-manager, and dynamic interface creation for the 7.0.116.0 Config Guide: http://www.cisco.com/en/US/docs/wireless/controller/7.0MR1/configuration/guide/cg_ports_interfaces.html#wp1286790
    "If" you want to keep an individual port configuration, and need more than 60 APs connected, you will need to create more than one "ap-manager" interface.  You will just make a new dyanamic intreface and place it on the same network as the current ap manager (ie, management interface) and mark it for dynamic ap management.  All APs will still need to only see the management interface for joining; the WLC will assign to the appropriate AP manager as needed.  The WLC will fill up the first AP manager before joining building tunnels through the next AP-manager interface, so in your lab you will not really be able to test this behavior, assuming the 3-4 APs you were using.
    1. You can keep your management interface with "dynamic ap management" enabled so this serves as the first AP manager; if you desire. 
    2. You will need to create another dynamic interface mapped to the next port.  enabled "dynamic ap management" again here, and place this new "ap-manager" interface on the same vlan as the mgmt.  Keep in mind creating a dynamic interface and designating it as an AP manager prevents mapping that interface to a WLAN, see note below.
    *NOTE (from config guide): When you enable this feature, this dynamic interface is configured as an AP-manager interface (only one AP-manager interface is allowed per physical port). A dynamic interface that is marked as an AP-manager interface cannot be used as a WLAN interface.
    I would highly suggest the LAG configuration so there is no need to worry about the ap manager interfaces, regardless of the number of APs communicating. This also allows for growth if WLC needs to be licensed for more and more APs.

  • 3702i AP's not Joining WLC - Layer 3 discovery request not received on management VLAN

    Hi Guys, 
    This is a follow up post to this thread: https://supportforums.cisco.com/discussion/12400481/3702i-not-joint-2504
    Have been playing around with my AP's and made sure the time is correct on all the devices ( WLC and Switch). I have also moved the AP's to the same Vlan as the management IP of the WLC. 
    if I move the AP's to the same Vlan as the WLC they join and are happy, as soon as I move them to a different Vlan they cant join and there time goes back to the default plus they do not seem to save the WLC details to flash but still remember the test names I give them.
    it appears that option 43 is working fine as I can see it look for the WLC IP and I have done some trouble shooting on the WLC and it looks like it see's the AP but doesn't except it.
    please see below for the boot up of the AP and the WLC logs: 
    AP 
    IIOS Bootloader - Starting system.
    *** deleted for breverity ***** 
    Loading "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-mx.153-3.JA1"...#########################
    File "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-mx.153-3.JA1" uncompressed and installed, entry point: 0x2003000
    executing...
    Secondary Bootloader - Starting system.
    Montserrat Board
    *** deleted for breverity ***** 
    Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1;flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1'
    Loading "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1"...###############################################
    File "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1" uncompressed and installed, entry point: 0x1003000
    executing...
                  *** deleted for breverity ***** 
    cisco AIR-CAP3702I-Z-K9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.
    Processor board ID FGL1838X4T1
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 8.0.110.0
    1 Gigabit Ethernet interface
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: F4:4E:05:B7:1E:84
    Part Number                          : 73-15243-01
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC18343WPR
    Top Assembly Part Number             : 068-05054-03
    Top Assembly Serial Number           : FGL1838X4T1
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP3702I-Z-K9
    % Please define a domain-name first.
    Press RETURN to get started!
    *Mar  1 00:00:19.295: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)
    *Mar  1 00:00:19.755: Registering HW DTLS
    *Mar  1 00:00:19.763: APAVC: Initial WLAN Buffers Given to System is  2500
    *Mar  1 00:00:19.815: APAVC:  WlanPAKs 42878 RadioPaks  42270
    *Mar  1 00:00:22.127: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:26.055: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)
    *Mar  1 00:00:26.167: Loading Power Tables from ram:/Q2.bin. Class = A
    *Mar  1 00:00:26.167:  record size of 3ss: 1168 read_ptr: 4F9698E
    *Mar  1 00:00:31.207: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)
    *Mar  1 00:00:31.251: Loading Power Tables from ram:/Q5.bin. Class = Z
    *Mar  1 00:00:31.251:  record size of vht: 2904 read_ptr: 4F9698E
    *Mar  1 00:00:31.407: Wait until the stile protocol list is initialized.
    *Mar  1 00:00:32.651: Start STILE Activation
    *Mar  1 00:00:34.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
    *Mar  1 00:00:35.447: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JA1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 19-Dec-14 11:20 by prod_rel_team
    *Mar  1 00:00:35.447: %SNMP-5-COLDSTART: SNMP agent on host Test_1 is undergoing a cold start
    *Mar  1 00:00:36.563: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:37.787: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:37.939: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:37.939: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:38.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:00:38.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:00:47.567: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Mar  1 00:00:48.567: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    *Mar  1 00:00:50.431: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (2-16)
    *Mar  1 00:00:50.431: DPAA Initialization Complete
    *Mar  1 00:00:50.431: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
    *Mar  1 00:00:51.431: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:53.435: %LINK-6-UPDOWN: Interface BVI1, changed state to up
    *Mar  1 00:00:53.867: Currently running a Release Image
    *Mar  1 00:00:54.287: Incorrect certificate in SHA2 PB !
    *Mar  1 00:00:54.287: Using SHA-1 signed certificate for image signing validation.
    *Mar  1 00:00:54.575: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:59.787: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.2, mask 255.255.255.0, hostname Test_1
    *Mar  1 00:01:02.707: APAVC: Succeeded to activate all the STILE protocols.
    *Mar  1 00:01:02.707: APAVC: Registering with CFT
    *Mar  1 00:01:02.707: APAVC: CFT registration of delete callback succeeded
    *Mar  1 00:01:02.707: APAVC: Reattaching  Original Buffer pool for system use
    *Mar  1 00:01:02.707: Pool-ReAtach: paks 42878 radio42270
    %Default route without gateway, if not a point-to-point interface, may impact performance
    *Mar  1 00:01:10.103: AP image integrity check PASSED
    *Mar  1 00:01:10.187: Incorrect certificate in SHA2 PB !
    *Mar  1 00:01:10.203: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:01:10.203: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:01:11.591: %CDP_PD-4-POWER_OK: 15.4 W power - NEGOTIATED inline power source
    *Mar  1 00:01:12.691: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:13.691: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:13.947: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:14.947: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:20.211: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 514 CLI Request Triggered
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:01:31.215: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    *Mar  1 00:02:11.599: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Mar  1 00:02:11.603: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Mar  1 00:02:11.611: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:02:12.603: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:02:12.639: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:02:12.647: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
    *Mar  1 00:02:12.655: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:02:13.639: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:02:13.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:02:13.699: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:02:14.699: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    Not in Bound state.
    *Mar  1 00:02:44.719: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 00:02:49.839: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.3, mask 255.255.255.0, hostname Test_1
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:02:55.719: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    Not in Bound state.
    *Mar  1 00:03:59.219: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 00:04:04.343: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.4, mask 255.255.255.0, hostname Test_1
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:04:10.223: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    WLC: 
    isco Controller) >show time
    Time............................................. Tue Jan 27 17:44:47 2015
    Timezone delta................................... 0:0
    Timezone location................................ (GMT +8:00) HongKong, Bejing, Chongquing
    NTP Servers
        NTP Polling Interval.........................     3600
         Index     NTP Key Index                  NTP Server                  NTP Msg Auth Status
           1              0                             150.101.176.226       AUTH DISABLED
    (Cisco Controller) >show ap join stats summary  
    Incorrect input! Use 'show ap join stats summary [all/<ap-mac>]'
    (Cisco Controller) >show ap join stats summary all 
    Number of APs.............................................. 2 
    Base Mac             AP EthernetMac       AP Name                 IP Address         Status
    f4:4e:05:aa:a6:a0    f4:4e:05:94:c3:98    APf44e.0594.c398        10.1.1.22          Joined    
    f4:4e:05:b6:ce:f0    N A                  Test_1                  10.1.20.7          Not Joined
    (Cisco Controller) >show ap join stats detailed f4:4e:05:b6:ce:f0
    Sync phase statistics
    - Time at sync request received............................ Not applicable
    - Time at sync completed................................... Not applicable
    Discovery phase statistics
    - Discovery requests received.............................. 45
    - Successful discovery responses sent...................... 21
    - Unsuccessful discovery request processing................ 24
    - Reason for last unsuccessful discovery attempt........... Layer 3 discovery request not received on management VLAN
    - Time at last successful discovery attempt................ Jan 27 17:45:49.705
    - Time at last unsuccessful discovery attempt.............. Jan 27 17:45:49.705
    Join phase statistics
    - Join requests received................................... 0
    - Successful join responses sent........................... 0
    - Unsuccessful join request processing..................... 0
    - Reason for last unsuccessful join attempt................ Not applicable
    - Time at last successful join attempt..................... Not applicable
    - Time at last unsuccessful join attempt................... Not applicable
    Configuration phase statistics
    --More-- or (q)uit
    - Configuration requests received.......................... 0
    - Successful configuration responses sent.................. 0
    - Unsuccessful configuration request processing............ 0
    - Reason for last unsuccessful configuration attempt....... Not applicable
    - Time at last successful configuration attempt............ Not applicable
    - Time at last unsuccessful configuration attempt.......... Not applicable
    Last AP message decryption failure details
    - Reason for last message decryption failure............... Not applicable
    Last AP disconnect details
    - Reason for last AP connection failure.................... Not applicable
    - Last AP disconnect reason................................ Not applicable
    Last join error summary
    - Type of error that occurred last......................... Lwapp discovery request rejected
    - Reason for error that occurred last...................... Layer 3 discovery request not received on management VLAN
    - Time at which the last join error occurred............... Jan 27 17:45:49.705
    AP disconnect details
    - Reason for last AP connection failure.................... Not applicable
                                                                               Ethernet Mac : 00:00:00:00:00:00  Ip Address : 10.1.20.7
    (Cisco Controller) >show interface summary 
     Number of Interfaces.......................... 4
    Interface Name                   Port Vlan Id  IP Address      Type    Ap Mgr Guest
    ap                               LAG  20       10.1.20.231     Dynamic No     No   
    guest                            LAG  30       10.1.30.231     Dynamic No     No   
    management                       LAG  10       10.1.1.231      Static  Yes    No   
    virtual                          N/A  N/A      1.1.1.1         Static  No     No   
    SWITCH
    witch#show run
    Building configuration...
    *** deleted for breverity ***** 
    no aaa new-model
    clock timezone AWST 8
    system mtu routing 1500
    ip routing
    ip dhcp pool WAP_Pool
       network 10.1.20.0 255.255.255.0
       default-router 10.1.20.1 
       option 43 hex f104.0a01.01e7
    ip dhcp pool Clients
       network 10.1.30.0 255.255.255.0
       default-router 10.1.30.1 
       dns-server 203.0.178.191 
    ip dhcp pool test
       network 10.1.1.0 255.255.255.0
       default-router 10.1.1.1 
    crypto pki trustpoint TP-self-signed-4082587776
     enrollment selfsigned
     subject-name cn=IOS-Self-Signed-Certificate-4082587776
     revocation-check none
     rsakeypair TP-self-signed-4082587776
    *** deleted for breverity ***** 
    *** deleted for breverity ***** !
    interface FastEthernet0/3
     description *** WLC ****
     switchport trunk encapsulation dot1q
     switchport mode trunk
    interface FastEthernet0/4
     description **** AP *****
     switchport access vlan 20
     switchport mode access
     spanning-tree portfast
    interface FastEthernet0/5
     description **** AP ****
     switchport access vlan 20
     switchport mode access
     spanning-tree portfast
    interface FastEthernet0/6
    i*** deleted for breverity ***** !
    interface Vlan10
     description *** Managment ***
     ip address 10.1.1.230 255.255.255.0
    interface Vlan20
     description *** WIRELESS APS ***
     ip address 10.1.20.1 255.255.255.0
    interface Vlan30
     ip address 10.1.30.1 255.255.255.0
    ip classless
    ip route 0.0.0.0 0.0.0.0 10.1.1.1
    ip http server
    ip http secure-server
    ip sla enable reaction-alerts
    l*** deleted for breverity ***** 
    ntp clock-period 36028827
    ntp source FastEthernet0/1
    ntp server 121.0.0.42
    ntp server 202.127.210.37
    end
    I have also placed a Device in Vlan 20 and it is able to ping the WLC and the WLC can ping it s routing is working. 
    Thanks 

    Hey Scott, 
    I gave that a shot and still no luck, log's from AP boot up:
    IIOS Bootloader - Starting system.
    flash is writable
    Tide XL MB - 40MB of flash
    Xmodem file system is available.
    flashfs[0]: 67 files, 9 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 41158656
    flashfs[0]: Bytes used: 20894208
    flashfs[0]: Bytes available: 20264448
    flashfs[0]: flashfs fsck took 20 seconds.
    Base Ethernet MAC address: f4:4e:05:b7:1e:84
    Ethernet speed is 100 Mb - FULL Duplex
    Loading "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-mx.153-3.JA1"...#########################
    File "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-mx.153-3.JA1" uncompressed and installed, entry point: 0x2003000
    executing...
    Secondary Bootloader - Starting system.
    Montserrat Board
    40MB format
    Tide XL MB - 40MB of flash
    Xmodem file system is available.
    flashfs[0]: 67 files, 9 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 41158656
    flashfs[0]: Bytes used: 20894208
    flashfs[0]: Bytes available: 20264448
    flashfs[0]: flashfs fsck took 21 seconds.
    flashfs[1]: 0 files, 1 directories
    flashfs[1]: 0 orphaned files, 0 orphaned directories
    flashfs[1]: Total bytes: 12257280
    flashfs[1]: Bytes used: 1024
    flashfs[1]: Bytes available: 12256256
    flashfs[1]: flashfs fsck took 1 seconds.
    Base Ethernet MAC address: f4:4e:05:b7:1e:84
    Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1;flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1'
    Loading "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1"...###############################################
    File "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1" uncompressed and installed, entry point: 0x1003000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JA1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 19-Dec-14 11:20 by prod_rel_team
    Montserrat Board
    40MB format
    Tide XL MB - 40MB of flash
    Initializing flashfs...
    flashfs[2]: 67 files, 9 directories
    flashfs[2]: 0 orphaned files, 0 orphaned directories
    flashfs[2]: Total bytes: 40900608
    flashfs[2]: Bytes used: 20894208
    flashfs[2]: Bytes available: 20006400
    flashfs[2]: flashfs fsck took 14 seconds.
    flashfs[2]: Initialization complete.
    flashfs[4]: 0 files, 1 directories
    flashfs[4]: 0 orphaned files, 0 orphaned directories
    flashfs[4]: Total bytes: 11999232
    flashfs[4]: Bytes used: 1024
    flashfs[4]: Bytes available: 11998208
    flashfs[4]: flashfs fsck took 0 seconds.
    flashfs[4]: Initialization complete.
    Copying radio files from flash: to ram:
    Copy in progress...CCCCC
    Copy in progress...CCC
    Copy in progress...CCCC
    Copy in progress...CCCC
    Copy in progress...CC
    Copy in progress...CCCC
    Copy in progress...CC
    Copy in progress...CCCCC
    Copy in progress...CCCC
    Copy in progress...CC
    Uncompressing radio files...
    ...done Initializing flashfs.
    Radio0  present 8764 8000 0 A8000000 A8010000 0
    Rate table has 650 entries (20 legacy/224 11n/406 11ac)
    POWER TABLE FILENAME = ram:/Q2.bin
    Radio1  present 8864 8000 0 80000000 80100000 4
    POWER TABLE FILENAME = ram:/Q5.bin
    Radio2 not present 0 0 0 0 0 8
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP3702I-Z-K9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.
    Processor board ID FGL1838X4T1
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 8.0.110.0
    1 Gigabit Ethernet interface
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: F4:4E:05:B7:1E:84
    Part Number                          : 73-15243-01
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC18343WPR
    Top Assembly Part Number             : 068-05054-03
    Top Assembly Serial Number           : FGL1838X4T1
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP3702I-Z-K9
    % Please define a domain-name first.
    Press RETURN to get started!
    *Mar  1 00:00:19.295: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)
    *Mar  1 00:00:19.755: Registering HW DTLS
    *Mar  1 00:00:19.763: APAVC: Initial WLAN Buffers Given to System is  2500
    *Mar  1 00:00:19.815: APAVC:  WlanPAKs 42878 RadioPaks  42270
    *Mar  1 00:00:22.127: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:26.055: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)
    *Mar  1 00:00:26.167: Loading Power Tables from ram:/Q2.bin. Class = A
    *Mar  1 00:00:26.167:  record size of 3ss: 1168 read_ptr: 4F9698E
    *Mar  1 00:00:31.207: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)
    *Mar  1 00:00:31.251: Loading Power Tables from ram:/Q5.bin. Class = Z
    *Mar  1 00:00:31.251:  record size of vht: 2904 read_ptr: 4F9698E
    *Mar  1 00:00:31.407: Wait until the stile protocol list is initialized.
    *Mar  1 00:00:32.651: Start STILE Activation
    *Mar  1 00:00:34.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
    *Mar  1 00:00:35.447: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JA1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 19-Dec-14 11:20 by prod_rel_team
    *Mar  1 00:00:35.447: %SNMP-5-COLDSTART: SNMP agent on host Test_1 is undergoing a cold start
    *Mar  1 00:00:36.563: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:37.787: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:37.939: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:37.939: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:38.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:00:38.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:00:47.567: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Mar  1 00:00:48.567: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    *Mar  1 00:00:50.431: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (2-16)
    *Mar  1 00:00:50.431: DPAA Initialization Complete
    *Mar  1 00:00:50.431: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
    *Mar  1 00:00:51.431: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:53.435: %LINK-6-UPDOWN: Interface BVI1, changed state to up
    *Mar  1 00:00:53.867: Currently running a Release Image
    *Mar  1 00:00:54.287: Incorrect certificate in SHA2 PB !
    *Mar  1 00:00:54.287: Using SHA-1 signed certificate for image signing validation.
    *Mar  1 00:00:54.575: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:59.787: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.2, mask 255.255.255.0, hostname Test_1
    *Mar  1 00:01:02.707: APAVC: Succeeded to activate all the STILE protocols.
    *Mar  1 00:01:02.707: APAVC: Registering with CFT
    *Mar  1 00:01:02.707: APAVC: CFT registration of delete callback succeeded
    *Mar  1 00:01:02.707: APAVC: Reattaching  Original Buffer pool for system use
    *Mar  1 00:01:02.707: Pool-ReAtach: paks 42878 radio42270
    %Default route without gateway, if not a point-to-point interface, may impact performance
    *Mar  1 00:01:10.103: AP image integrity check PASSED
    *Mar  1 00:01:10.187: Incorrect certificate in SHA2 PB !
    *Mar  1 00:01:10.203: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:01:10.203: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:01:11.591: %CDP_PD-4-POWER_OK: 15.4 W power - NEGOTIATED inline power source
    *Mar  1 00:01:12.691: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:13.691: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:13.947: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:14.947: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:20.211: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 514 CLI Request Triggered
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:01:31.215: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    *Mar  1 00:02:11.599: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Mar  1 00:02:11.603: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Mar  1 00:02:11.611: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:02:12.603: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:02:12.639: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:02:12.647: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
    *Mar  1 00:02:12.655: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:02:13.639: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:02:13.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:02:13.699: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:02:14.699: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    Not in Bound state.
    *Mar  1 00:02:44.719: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 00:02:49.839: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.3, mask 255.255.255.0, hostname Test_1
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:02:55.719: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    Not in Bound state.
    *Mar  1 00:03:59.219: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 00:04:04.343: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.4, mask 255.255.255.0, hostname Test_1
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:04:10.223: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP

  • WLC 5508 do not Join CAP2602E

    Dear All,
    My WLC a 5508 version 8.0.100.0.Do not Join a CAP2602E, is the first time that i connect this model of AP to the WLC.
    I have enabled some Debug and I see that on the controller I got the "Unknown AP type. Using Controller Version!!!" error on the WLC.
    Following the trouble shooting guide lines about Join issue, I have also checked this:
    (Cisco Controller) >show ap join stats detailed 84:80:2d:c2:9c:90  <-----This is the 2602E Mac
    Sync phase statistics
    - Time at sync request received............................ Not applicable
    - Time at sync completed................................... Not applicable
    Discovery phase statistics
    - Discovery requests received.............................. 75
    - Successful discovery responses sent...................... 75
    - Unsuccessful discovery request processing................ 0
    - Reason for last unsuccessful discovery attempt........... Not applicable
    - Time at last successful discovery attempt................ Dec 02 16:43:17.470
    - Time at last unsuccessful discovery attempt.............. Not applicable
    Join phase statistics
    - Join requests received................................... 0
    - Successful join responses sent........................... 0
    - Unsuccessful join request processing..................... 0
    - Reason for last unsuccessful join attempt................ Not applicable
    - Time at last successful join attempt..................... Not applicable
    - Time at last unsuccessful join attempt................... Not applicable
    Configuration phase statistics
    --More-- or (q)uit
    - Configuration requests received.......................... 0
    - Successful configuration responses sent.................. 0
    - Unsuccessful configuration request processing............ 0
    - Reason for last unsuccessful configuration attempt....... Not applicable
    - Time at last successful configuration attempt............ Not applicable
    - Time at last unsuccessful configuration attempt.......... Not applicable
    Last AP message decryption failure details
    - Reason for last message decryption failure............... Not applicable
    Last AP disconnect details
    - Reason for last AP connection failure.................... Not applicable
    - Last AP disconnect reason................................ Not applicable
    Last join error summary
    - Type of error that occurred last......................... None
    - Reason for error that occurred last...................... Not applicable
    - Time at which the last join error occurred............... Not applicable
    AP disconnect details
    - Reason for last AP connection failure.................... Not applicable
    WLC Policy config is:  Someone can help pls?

    Dear All,
    I have done other tests, and I hope this time I will be more precise.
    The AP are on the same vlan where is located the WLC.
    I found a way to work around the problem.
    If I take a out-of-the-box AP and connect if on the same vlan of WLC, and after the boot I configure on the Ap:
    capwap ap ip address 172.xx.xx.xx mask
    capwap ap ip defaut-gataway 172.xx.xx.xx
    capwap ap controller ip address ip_addressxx.xx.xx.xx
    capwap ap primary-base controller_name controller_ip_address
    The Ap try to Join the WLC but with no success:
    User Access Verification
    Username: cisco
    Password:
    AP1c6a.7ae2.ab11>en
    Password:
    % Access denied
    AP1c6a.7ae2.ab11>en
    Password:
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#capwap
    AP1c6a.7ae2.ab11#capwap ap
    AP1c6a.7ae2.ab11#capwap ap controll
    AP1c6a.7ae2.ab11#capwap ap controller ip address 172.26.110.4
    AP1c6a.7ae2.ab11#capwap ap controller ip address 172.26.110.4                                  prima
    AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.26.110.4
    AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.26.110.4controller ip address 172.26.110.4                                  ip addess
    AP1c6a.7ae2.ab11#capwap ap ip addess      
    AP1c6a.7ae2.ab11#capwap ap ip
    *Mar  1 00:03:56.479: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
    *Mar  1 00:03:56.479: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
    *Mar  1 00:03:56.479: %MESH-6-LINK_UPDOWN: Mesh station 1c6a.7ae2.ab11 link Down
    *Mar  1 00:03:58.479: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Mar  1 00:03:59.479: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    % Incomplete command.
    AP1c6a.7ae2.ab11#capwap ap ip ?
      address          Configure ap static IP address
      default-gateway  Configure Default-gateway IP address
    AP1c6a.7ae2.ab11#capwap ap ip defa
    AP1c6a.7ae2.ab11#capwap ap ip default-gateway 172.26.110.1
    AP1c6a.7ae2.ab11#capwap ap ip default-gateway 172.26.110.1                            address\
    AP1c6a.7ae2.ab11#capwap ap ip address 172.26.110.
    *Mar  1 00:04:39.891: %IP-4-CLASS: Bad IP address and mask 0.0.0.0/0 in class_resolve()
    *Mar  1 00:04:40.391: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    *Mar  1 00:04:41.555: %CAPWAP-3-ERRORLOG: Invalid event 29 & state 4 combination.
    *Mar  1 00:04:41.555: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 29, state 4
    *Mar  1 00:04:41.555: %CAPWAP-3-ERRORLOG: Failed to handle timer message.
    *Mar  1 00:04:41.555: %CAPWAP-3-ERRORLOG: Failed to process timer message.
    *Mar  1 00:04:42.391: %LINK-6-UPDOWN: Interface BVI1, changed state to up
    *Mar  1 00:04:43.391: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:04:45.439: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
    *Mar  1 00:04:45.447: %PARSER-4-BADCFG: Unexpected end of configuration file.
    *Mar  1 00:04:45.467: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:04:46.439: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:04:46.471: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Mar  1 00:04:46.479: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:04:47.499: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:04:48.499: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up?
    A.B.C.D  
    AP1c6a.7ae2.ab11#capwap ap ip address 172.26.110.30 255.255.254.0
    You should configure Domain and Name Server from controller CLI/GUI.
    AP1c6a.7ae2.ab11#
    *Mar  1 00:05:16.503: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to downsh
    *Mar  1 00:05:16.507: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:05:17.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:05:17.527: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:05:18.527: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    % Type "show ?" for a list of subcommands
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#sh cap
    AP1c6a.7ae2.ab11#sh cap
    *Mar  1 00:05:26.467: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
    *Mar  1 00:05:26.467: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec  4 07:46:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:46:23.003: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to downw
    AP1c6a.7ae2.ab11#sh capwap
    *Dec  4 07:46:23.011: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Dec  4 07:46:23.707: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:46:23.707: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
    *Dec  4 07:46:23.711: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
    *Dec  4 07:46:23.711: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
    *Dec  4 07:46:23.711: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
    *Dec  4 07:46:23.711: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec  4 07:46:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:46:23.291: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Dec  4 07:46:23.319: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:46:23.723: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:46:23.723: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
    *Dec  4 07:46:23.727: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
    *Dec  4 07:46:23.727: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
    *Dec  4 07:46:23.727: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
    *Dec  4 07:46:23.727: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec  4 07:46:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:46:23.627: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:46:23.635: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Dec  4 07:46:23.719: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:46:23.719: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
    *Dec  4 07:46:23.723: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
    *Dec  4 07:46:23.723: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
    *Dec  4 07:46:23.723: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
    *Dec  4 07:46:23.723: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec  4 07:46:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:46:23.723: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:46:23.727: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
    *Dec  4 07:46:24.327: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:46:24.335: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Dec  4 07:46:24.343: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Dec  4 07:46:24.467: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.9 peer_port: 5246
    *Dec  4 07:46:24.467: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.9
    *Dec  4 07:46:24.467: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Dec  4 07:46:24.467: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Dec  4 07:46:24.467: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec  4 07:46:24.467: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 172.26.110.9
    *Dec  4 07:46:25.363: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:46:25.371: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Dec  4 07:46:25.379: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Dec  4 07:46:26.399: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:46:27.399: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Dec  4 07:46:29.467: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.9
    *Dec  4 07:46:29.471: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Dec  4 07:46:29.479: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Dec  4 07:46:30.471: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Dec  4 07:46:30.499: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:46:31.499: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    % Incomplete command.
    AP1c6a.7ae2.ab11#sh capwap
    AP1c6a.7ae2.ab11#sh capwap ip
    AP1c6a.7ae2.ab11#sh capwap ip ?
      config  CAPWAP IP static configuration
    AP1c6a.7ae2.ab11#sh capwap ip con
    AP1c6a.7ae2.ab11#sh capwap ip config
    LWAPP Static IP Configuration
    IP Address         172.26.110.30  
    IP netmask         255.255.254.0  
    Default Gateway    172.26.110.1   
    Primary Controller 172.26.110.4   
    AP1c6a.7ae2.ab11#
    *Dec  4 07:47:22.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.9:5246
    *Dec  4 07:47:23.035: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    *Dec  4 07:47:23.047: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
    *Dec  4 07:47:23.071: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:47:24.047: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Dec  4 07:47:24.079: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Dec  4 07:47:24.087: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Dec  4 07:47:25.107: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:47:26.107: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Dec  4 07:47:33.071: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
    *Dec  4 07:47:33.071: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec  4 07:47:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:47:36.003: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Dec  4 07:47:36.011: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Dec  4 07:47:36.711: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:47:36.715: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
    *Dec  4 07:47:36.715: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
    *Dec  4 07:47:36.715: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
    *Dec  4 07:47:36.715: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
    *Dec  4 07:47:36.715: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec  4 07:47:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:47:36.287: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Dec  4 07:47:36.315: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:47:36.719: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:47:36.719: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
    *Dec  4 07:47:36.723: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
    *Dec  4 07:47:36.723: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
    *Dec  4 07:47:36.723: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
    *Dec  4 07:47:36.723: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec  4 07:47:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:47:36.627: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec  4 07:47:36.635: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Dec  4 07:47:36.719: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:47:36.719: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
    *Dec  4 07:47:36.723: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
    *Dec  4 07:47:36.723: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
    *Dec  4 07:47:36.723: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    On the WLC side at the same time:
    *spamApTask0: Dec 04 08:46:34.619: ðcIÝ
    *spamApTask0: Dec 04 08:46:34.619: f0:9e:63:49:dd:a0 Radius Authentication failed. Closing dtls Connection.
    *spamApTask0: Dec 04 08:46:34.627: Unable to find deleted AP f0:9e:63:49:dd:a0
    *spamApTask0: Dec 04 08:46:34.628: 1c:6a:7a:e2:ab:11 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.26.110.30:10930)since DTLS session is not established
    *spamApTask0: Dec 04 08:46:35.345: f0:9e:63:49:dd:a0 State machine handler: Failed to process  msg type = 3 state = 0 from 172.26.110.30:10930
    *spamApTask0: Dec 04 08:46:35.346: 1c:6a:7a:e2:ab:11 Failed to parse CAPWAP packet from 172.26.110.30:10930
    *spamApTask0: Dec 04 08:46:35.346: ðcIÝ
    *spamApTask0: Dec 04 08:46:35.346: f0:9e:63:49:dd:a0 Radius Authentication failed. Closing dtls Connection.
    *spamApTask0: Dec 04 08:46:35.354: Unable to find deleted AP f0:9e:63:49:dd:a0
    *spamApTask0: Dec 04 08:46:35.354: 1c:6a:7a:e2:ab:11 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.26.110.30:10930)since DTLS session is not established
    *spamApTask0: Dec 04 08:46:36.070: f0:9e:63:49:dd:a0 State machine handler: Failed to process  msg type = 3 state = 0 from 172.26.110.30:10930
    *spamApTask0: Dec 04 08:46:36.070: 1c:6a:7a:e2:ab:11 Failed to parse CAPWAP packet from 172.26.110.30:10930
    *spamApTask0: Dec 04 08:46:36.071: ðcIÝ
    *spamApTask0: Dec 04 08:46:36.071: f0:9e:63:49:dd:a0 Radius Authentication failed. Closing dtls Connection.
    *spamApTask0: Dec 04 08:46:36.079: Unable to find deleted AP f0:9e:63:49:dd:a0
    *spamApTask0: Dec 04 08:46:36.080: 1c:6a:7a:e2:ab:11 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.26.110.30:10930)since DTLS session is not established
    *spamApTask0: Dec 04 08:46:36.799: f0:9e:63:49:dd:a0 State machine handler: Failed to process  msg type = 3 state = 0 from 172.26.110.30:10930
    *spamApTask0: Dec 04 08:46:36.799: 1c:6a:7a:e2:ab:11 Failed to parse CAPWAP packet from 172.26.110.30:10930
    *spamApTask0: Dec 04 08:46:36.799: ðcIÝ
    *spamApTask0: Dec 04 08:46:36.799: f0:9e:63:49:dd:a0 Radius Authentication failed. Closing dtls Connection.
    *spamApTask0: Dec 04 08:46:36.807: Unable to find deleted AP f0:9e:63:49:dd:a0
    *spamApTask0: Dec 04 08:46:36.808: 1c:6a:7a:e2:ab:11 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.26.110.30:10930)since DTLS session is not established
    *spamApTask1: Dec 04 08:47:36.875: Unknown AP type. Using Controller Version!!!
    *spamApTask1: Dec 04 08:47:36.876: Unknown AP type. Using Controller Version!!!
    *spamApTask1: Dec 04 08:47:36.876: Unknown AP type. Using Controller Version!!!
    *spamApTask1: Dec 04 08:47:36.876: Unknown AP type. Using Controller Version!!!
    But If I take thw same Ap unplug the power cord, and press the MODE button, then I go in Rommode, I do the command Boot, the Ap restart, I configure again the same capwap ap commands, and the Ap JOIN the WLC!!!!! Somone can explain me why?
    AP1c6a.7ae2.ab11#
    IOS Bootloader - Starting system.
    flash is writable
    FLASH CHIP:  Macronix Mirrorbit (00C2)
    Xmodem file system is available.
    flashfs[0]: 42 files, 8 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31997952
    flashfs[0]: Bytes used: 11515904
    flashfs[0]: Bytes available: 20482048
    flashfs[0]: flashfs fsck took 16 seconds.
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 1c:6a:7a:e2:ab:11
    Ethernet speed is 100 Mb - FULL Duplex
    button is pressed, wait for button to be released...
    button pressed for 24 seconds
    process_config_recovery: set IP address and config to default 10.0.0.1
    process_config_recovery: image recovery
    image_recovery: Download default IOS tar image tftp://255.255.255.255/ap3g2-k9w7-tar.default
    examining image...
    DPAA Set for Independent Mode
    DPAA_INIT = 0x0
    %Error opening tftp://255.255.255.255/ap3g2-k9w7-tar.default (connection timed out)ap:
    ap:
    ap:
    ap:
    ap:
    ap:
    ap: boot
    Rebooting system to reset DPAA...
    IOS Bootloader - Starting system.
    flash is writable
    FLASH CHIP:  Macronix Mirrorbit (00C2)
    Xmodem file system is available.
    flashfs[0]: 42 files, 8 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31997952
    flashfs[0]: Bytes used: 11515904
    flashfs[0]: Bytes available: 20482048
    flashfs[0]: flashfs fsck took 15 seconds.
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 1c:6a:7a:e2:ab:11
    Ethernet speed is 100 Mb - FULL Duplex
    Loading "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1"...###########################
    File "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1" uncompressed and installed, entry point: 0x2003000
    executing...
    Secondary Bootloader - Starting system.
    Xmodem file system is available.
    flashfs[0]: 42 files, 8 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31997952
    flashfs[0]: Bytes used: 11515904
    flashfs[0]: Bytes available: 20482048
    flashfs[0]: flashfs fsck took 8 seconds.
    Base Ethernet MAC address: 1c:6a:7a:e2:ab:11
    Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1'
    Loading "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1"...###############################
    File "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1" uncompressed and installed, entry point: 0x2003000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C2600 Software (AP3G2-K9W8-M), Version 15.2(4)JA1, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2013 by Cisco Systems, Inc.
    Compiled Tue 30-Jul-13 22:57 by prod_rel_team
    Initializing flashfs...
    flashfs[3]: 42 files, 8 directories
    flashfs[3]: 0 orphaned files, 0 orphaned directories
    flashfs[3]: Total bytes: 31739904
    flashfs[3]: Bytes used: 11515904
    flashfs[3]: Bytes available: 20224000
    flashfs[3]: flashfs fsck took 8 seconds.
    flashfs[3]: Initialization complete.
    flashfs[4]: 0 files, 1 directories
    flashfs[4]: 0 orphaned files, 0 orphaned directories
    flashfs[4]: Total bytes: 11999232
    flashfs[4]: Bytes used: 1024
    flashfs[4]: Bytes available: 11998208
    flashfs[4]: flashfs fsck took 0 seconds.
    flashfs[4]: Initialization complete.
    Copying radio files from flash: to ram:
    Copy in progress...CCCCC
    Copy in progress...CCC
    Copy in progress...CCCC
    Copy in progress...CCCC
    Copy in progress...CC
    Uncompressing radio files...
    ...done Initializing flashfs.
    Radio0  present 8764 8000 0 A8000000 A8010000 0
    Rate table has 244 entries (64 SGI/104 BF variants)
    Radio1  present 8764 8000 0 88000000 88010000 4
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    %Error opening flash:/ap3g2-rcvk9w8-mx/info (No such file or directory)cisco AIR-CAP2602E-E-K9 (PowerPC) processor (revision A0) with 180214K/81920K bytes of memory.
    Processor board ID FCZ1843Q0WD
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 7.5.1.73
    1 Gigabit Ethernet interface
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 1C:6A:7A:E2:AB:11
    Part Number                          : 73-14511-03
    PCA Assembly Number                  : 800-37898-01
    PCA Revision Number                  : B0
    PCB Serial Number                    : FOC18403PBM
    Top Assembly Part Number             : 800-38357-02
    Top Assembly Serial Number           : FCZ1843Q0WD
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP2602E-E-K9   
    % Please define a domain-name first.
    Press RETURN to get started!
    *Mar  1 00:00:11.299: FIPS IOS test Image Checksum successful
    *Mar  1 00:00:11.299: FIPS IOS test Crypto RNG DEK Key Test successful
    *Mar  1 00:00:11.299: FIPS IOS test SHA-1 successful
    *Mar  1 00:00:11.299: FIPS IOS test HMAC-SHA1 successful
    *Mar  1 00:00:11.299: FIPS IOS test AES CBC 128-bit Encrypt successful
    *Mar  1 00:00:11.299: FIPS IOS test AES CBC 128-bit Decrypt successful
    *Mar  1 00:00:11.299: FIPS IOS test IOS AES CMAC Encrypt successful
    *Mar  1 00:00:11.299: FIPS IOS test IOS CCM Encrypt successful
    *Mar  1 00:00:11.299: FIPS IOS test IOS CCM Decrypt successful
    *Mar  1 00:00:11.331: FIPS IOS test RSA Signature Generation successful
    *Mar  1 00:00:11.335: FIPS IOS test RSA Signature Verification successful
    *Mar  1 00:00:11.335: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
    *Mar  1 00:00:11.335: %IFMGR-7-NO_IFINDEX_FILE: Unable to open nvram:/ifIndex-table No such file or directory
    *Mar  1 00:00:11.791: Registering HW DTLS
    *Mar  1 00:00:14.591: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:18.271: FIPS RADIO test AES 128-bit encrypt for TX on Dot11Radio 0 successful
    *Mar  1 00:00:18.271: FIPS RADIO test AES 128-bit CCM encrypt on Dot11Radio 0 successful
    *Mar  1 00:00:18.271: FIPS RADIO test AES 128-bit CCM decrypt on Dot11Radio 0 successful
    *Mar  1 00:00:18.271: FIPS RADIO test AMAC AES 128-bit CMAC encrypt on Dot11Radio 0 successful
    *Mar  1 00:00:18.271: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
    *Mar  1 00:00:24.399: FIPS RADIO test AES 128-bit encrypt for TX on Dot11Radio 1 successful
    *Mar  1 00:00:24.399: FIPS RADIO test AES 128-bit CCM encrypt on Dot11Radio 1 successful
    *Mar  1 00:00:24.399: FIPS RADIO test AES 128-bit CCM decrypt on Dot11Radio 1 successful
    *Mar  1 00:00:24.399: FIPS RADIO test AMAC AES 128-bit CMAC encrypt on Dot11Radio 1 successful
    *Mar  1 00:00:24.399: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
    *Mar  1 00:00:24.483: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
    *Mar  1 00:00:26.831: %CDP_PD-4-POWER_OK: Full power - AC_ADAPTOR inline power source
    *Mar  1 00:00:26.859: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C2600 Software (AP3G2-K9W8-M), Version 15.2(4)JA1, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2013 by Cisco Systems, Inc.
    Compiled Tue 30-Jul-13 22:57 by prod_rel_team
    *Mar  1 00:00:26.859: %SNMP-5-COLDSTART: SNMP agent on host ap is undergoing a cold start
    *Mar  1 00:00:26.915: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:00:26.923: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
    *Mar  1 00:00:26.923: %CAPWAP-3-ERRORLOG: Failed to load configuration from flash. Resetting to default config
    *Mar  1 00:00:26.927: %PARSER-4-BADCFG: Unexpected end of configuration file.
    *Mar  1 00:00:26.939: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:27.031: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:27.031: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:27.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:27.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:00:28.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:00:28.083: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:00:29.071: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:29.159: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:29.167: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Mar  1 00:00:29.175: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:00:30.063: FIPS HW test SHA-1 successful
    *Mar  1 00:00:30.063: FIPS HW test HMAC-SHA1 successful
    *Mar  1 00:00:30.063: FIPS HW test AES CBC 128-bit Encrypt successful
    *Mar  1 00:00:30.063: FIPS HW test AES CBC 128-bit Decrypt successful
    *Mar  1 00:00:30.159: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:30.167: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:00:30.195: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:30.563: FIPS HW test SHA-1 successful
    *Mar  1 00:00:30.563: FIPS HW test HMAC-SHA1 successful
    *Mar  1 00:00:30.563: FIPS HW test AES CBC 128-bit Encrypt successful
    *Mar  1 00:00:30.563: FIPS HW test AES CBC 128-bit Decrypt successful
    *Mar  1 00:00:30.563: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed
    *Mar  1 00:00:30.563: DPAA Initialization Complete
    *Mar  1 00:00:30.563: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
    *Mar  1 00:00:31.195: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:00:31.563: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up%Default route without gateway, if not a point-to-point interface, may impact performance
    *Mar  1 00:00:55.703: Logging LWAPP message to 255.255.255.255.
    Not in Bound state.
    *Mar  1 00:01:55.707: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
    User Access Verification
    Username: cisco
    Password:
    AP1c6a.7ae2.ab11>en
    Password:
    AP1c6a.7ae2.ab11#sh capwap
    AP1c6a.7ae2.ab11#sh capwap ip
    AP1c6a.7ae2.ab11#sh capwap ip con
    AP1c6a.7ae2.ab11#sh capwap ip config
    LWAPP Static IP Configuration
    AP1c6a.7ae2.ab11#
    Not in Bound state.
    *Mar  1 00:02:45.707: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#cap
    AP1c6a.7ae2.ab11#capwap ap
    AP1c6a.7ae2.ab11#capwap ap co
    AP1c6a.7ae2.ab11#capwap ap controller 172.26.110.4
                                          ^
    % Invalid input detected at '^' marker.
    AP1c6a.7ae2.ab11#capwap ap controller 172.26.110.4i172.26.110.4p172.26.110.4 172.26.110.4a172.26.110.4d172.26.110.4d172.26.110.4r172.26.110.4e172.26.110.4s172.26.110.4s172.26.110.4 172.26.110.4
    AP1c6a.7ae2.ab11#capwap ap controller ip address 172.26.110.4                                    prim
    AP1c6a.7ae2.ab11#capwap ap prima
    AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.2
    Not in Bound state.6.
    *Mar  1 00:03:35.707: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.110.4 ?
      <cr>
    AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.26.110.4
    AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.26.110.4                                 ip def
    AP1c6a.7ae2.ab11#capwap ap ip default-gateway 172.26.110.4 1
    AP1c6a.7ae2.ab11#capwap ap ip default-gateway 172.26.110.1                            add
    AP1c6a.7ae2.ab11#capwap ap ip address 172.26.110.30 255.255.254.0
    Not in Bound state.
    *Mar  1 00:04:25.707: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
    You should configure Domain and Name Server from controller CLI/GUI.
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#
    AP1c6a.7ae2.ab11#sh cap
    AP1c6a.7ae2.ab11#sh capw
    AP1c6a.7ae2.ab11#sh capwap ip
    AP1c6a.7ae2.ab11#sh capwap ip con
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    AP1c6a.7ae2.ab11#sh capwap ip config
    LWAPP Static IP Configuration
    IP Address         172.26.110.30  
    IP netmask         255.255.254.0  
    Default Gateway    172.26.110.1   
    Primary Controller 172.26.110.4   
    AP1c6a.7ae2.ab11#
    *Mar  1 00:04:47.067: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    examining image...!
    extracting info (283 bytes)
    Image info:
        Version Suffix: k9w8-.153-3.JA
        Image Name: ap3g2-k9w8-mx.153-3.JA
        Version Directory: ap3g2-k9w8-mx.153-3.JA
        Ios Image Size: 225792
        Total Image Size: 13455872
        Image Feature: WIRELESS LAN|LWAPP
        Image Family: AP3G2
        Wireless Switch Management Version: 8.0.100.0
    Extracting files...
    *Mar  1 00:04:57.067: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
    *Mar  1 00:04:57.067: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec  4 07:57:47.000: %CAPWAP-5-DTLSREQSEND: DT
    ap3g2-k9w8-mx.153-3.JA/ (directory) 0 (bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/V2.bin (12826 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/Y2.bin (5830 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/file_hashes (7254 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/8004.img (561134 bytes)!!!LS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:57:47.707: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
    *Dec  4 07:57:47.707: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4perform archive download capwap:/ap3g2 tar file
    *Dec  4 07:57:47.751: %CAPWAP-6-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
    *Dec  4 07:57:47.751: Loading file /ap3g2...
    extracting ap3g2-k9w8-mx.153-3.JA/U2.bin (6996 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/X5.bin (1566 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/final_hash.sig (513 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/R5.bin (3423 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-k9w8-tx.153-3.JA (73 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/R2.bin (13992 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/img_sign_rel_sha2.cert (1371 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/B2.bin (9328 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/info (283 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/F5.bin (3662 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/8006.img (563979 bytes)!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    ap3g2-k9w8-mx.153-3.JA/html/ (directory) 0 (bytes)
    ap3g2-k9w8-mx.153-3.JA/html/level/ (directory) 0 (bytes)
    ap3g2-k9w8-mx.153-3.JA/html/level/1/ (directory) 0 (bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/forms.js (20125 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/appsui.js (563 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/ap_home.shtml.gz (1370 bytes)!
    ap3g2-k9w8-mx.153-3.JA/html/level/1/images/ (directory) 0 (bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/info.gif (399 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/cisco-logo-2007.gif (1648 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/background_web41.jpg (732 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/login_homeap.gif (19671 bytes)!!
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/itp-logo.png (2822 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/config.js (27254 bytes)!!
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/sitewide.js (17250 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/officeExtendap.css (41801 bytes)!!!!
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/back.shtml (512 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/config-oeap.js (779 bytes)
    ap3g2-k9w8-mx.153-3.JA/html/level/15/ (directory) 0 (bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapBanner.htm (7514 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapConfig.shtml.gz (2864 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapSummary.htm (985 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapHelp.htm (5721 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapMain.shtml.gz (3350 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapEvent.shtml.gz (988 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/B5.bin (1963 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/E5.bin (1846 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/Y5.bin (1511 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/C2.bin (19822 bytes)!!
    extracting ap3g2-k9w8-mx.153-3.JA/final_hash (141 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-k9w8-xx.153-3.JA (11381713 bytes)!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    *Dec  4 07:59:47.723: %CAPWAP-3-ERRORLOG: Invalid event 48 & state 10 combination.
    *Dec  4 07:59:47.723: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 48, state 10
    *Dec  4 07:59:47.723: %CAPWAP-3-ERRORLOG: Failed to handle timer message.
    *Dec  4 07:59:47.723: %CAPWAP-3-ERRORLOG: Failed to process timer message.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
    extracting ap3g2-k9w8-mx.153-3.JA/C5.bin (6936 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-k9w8-mx.153-3.JA (215867 bytes)!!!!!!!!!!!!!!!!!
    extracting ap3g2-k9w8-mx.153-3.JA/U5.bin (3048 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/img_sign_rel.cert (1375 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/Q5.bin (2806 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/X2.bin (16324 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/E2.bin (19822 bytes)!!
    extracting ap3g2-k9w8-mx.153-3.JA/Q2.bin (6996 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-bl-2600 (190140 bytes)!!!!!!!!!!!!!!
    extracting ap3g2-k9w8-mx.153-3.JA/V5.bin (512 bytes)
    extracting ap3g2-k9w8-mx.153-3.JA/F2.bin (13992 bytes)!
    extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-bl-3600 (189183 bytes)!!!!!!!!!!!!!!!
    extracting info.ver (283 bytes)
    Deleting current version: flash:/ap3g2-k9w8-mx.152-4.JA1...
    Set booting path to recovery image: ''...done.
    New software image installed in flash:/ap3g2-k9w8-mx.153-3.JA
    Configuring system to use
    n
    e
    wW riimtaigneg. .o.udto nteh.e
    eavrecnhti vleo gd otwon lfolaads:h :t/aekveesn t1.5l1o gs e.c.o.n
    d
    s

  • 1310 LAP unable to join WLC 5508

    Hi All,
    Hope to you a very happy new year,
    I have an (AIR-LAP1310G-E-K9R) and I tried to join it to WLC 5508 but I'm facing an error,
    I get this error from the LAP 1310 console as below:
    Compiled Mon 17-Jul-06 11:45 by alnguyen
    *Mar  1 00:00:05.289: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
    *Mar  1 00:00:06.289: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
    *Mar  1 00:00:23.337: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Mar  1 00:00:33.477: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 10.114.36.25, mask 255.255.255.0, hostname APe4d3.f1c2.8882
    examining image...
    *Mar  1 00:00:44.781: %LWAPP-5-CHANGED: LWAPP changed state to JOIN
    *Jan 11 15:21:37.178: %LWAPP-5-CHANGED: LWAPP changed state to IMAGE
    %Error opening  (Protocol error)archive download: takes 6 seconds
    *Jan 11 15:21:43.178: LWAPP_CLIENT_ERROR_DEBUG:  Retransmission count for packet exceeded more than max(IMAGE_DATA
    , 1)
    *Jan 11 15:21:43.178: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Jan 11 15:21:43.179: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Jan 11 15:21:43.181: LWAPP_CLIENT_ERROR: not receive read response(3)
    *Jan 11 15:21:43.185: lwapp_image_proc: unable to open tar file
    *Jan 11 15:21:43.200: %SYS-5-RELOAD: Reload requested by lwapp image download proc. Reload Reason: Reason unspecified.
    *Jan 11 15:21:43.201: %LWAPP-5-CHANGED: LWAPP changed state to DOWN
    *Jan 11 15:21:43.207: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERYXmodem file system is available.
    flashfs[0]: 3 files, 2 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 7741440
    flashfs[0]: Bytes used: 1861632
    flashfs[0]: Bytes available: 5879808
    flashfs[0]: flashfs fsck took 14 seconds.
    Base ethernet MAC Address: e4:d3:f1:c2:88:82
    Initializing ethernet port 0...
    Reset ethernet port 0...
    Reset done!
    ethernet link up, 100 mbps, full-duplex
    Ethernet port 0 initialized: link is up
    Loading "flash:/c1310-rcvk9w8-mx/c1310-rcvk9w8-mx"...#######################################################################################################################################################################
    File "flash:/c1310-rcvk9w8-mx/c1310-rcvk9w8-mx" uncompressed and installed, entry point: 0x3000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C1310 Software (C1310-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2006 by Cisco Systems, Inc.
    Compiled Mon 17-Jul-06 11:45 by alnguyen
    Image text-base: 0x00003000, data-base: 0x00359EA0
    Initializing flashfs...
    flashfs[1]: 3 files, 2 directories
    flashfs[1]: 0 orphaned files, 0 orphaned directories
    flashfs[1]: Total bytes: 7741440
    flashfs[1]: Bytes used: 1861632
    flashfs[1]: Bytes available: 5879808
    flashfs[1]: flashfs fsck took 2 seconds.
    flashfs[1]: Initialization complete....done Initializing flashfs.
    cisco AIR-LAP1310G-E-K9R   (PowerPCElvis) processor (revision B0) with 24566K/8192K bytes of memory.
    Processor board ID FGL1649T00U
    PowerPCElvis CPU at 262Mhz, revision number 0x0950
    Last reset from reload
    LWAPP image version 3.0.51.0
    1 FastEthernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: E4:D3:F1:C2:88:82
    Part Number                          : 73-8960-09
    PCA Assembly Number                  : 800-24963-06
    PCA Revision Number                  : B0
    PCB Serial Number                    : FOC16447J1K
    Top Assembly Part Number             : 800-28479-05
    Top Assembly Serial Number           : FGL1649T00U
    Top Revision Number                  : D0
    Product/Model Number                 : AIR-LAP1310G-E-K9R
    Press RETURN to get started!
    *Mar  1 00:00:04.329: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C1310 Software (C1310-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2006 by Cisco Systems, Inc.
    Compiled Mon 17-Jul-06 11:45 by alnguyen
    *Mar  1 00:00:05.289: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
    *Mar  1 00:00:06.289: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
    *Mar  1 00:00:23.337: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Mar  1 00:00:33.352: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 10.114.36.28, mask 255.255.255.0, hostname APe4d3.f1c2.8882
    examining image...
    *Mar  1 00:00:44.783: %LWAPP-5-CHANGED: LWAPP changed state to JOIN
    *Jan 11 15:21:37.189: %LWAPP-5-CHANGED: LWAPP changed state to IMAGE
    %Error opening  (Protocol error)archive download: takes 6 seconds
    *Jan 11 15:21:43.189: LWAPP_CLIENT_ERROR_DEBUG:  Retransmission count for packet exceeded more than max(IMAGE_DATA
    , 1)
    *Jan 11 15:21:43.189: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Jan 11 15:21:43.189: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Jan 11 15:21:43.192: LWAPP_CLIENT_ERROR: not receive read response(3)
    *Jan 11 15:21:43.195: lwapp_image_proc: unable to open tar file
    *Jan 11 15:21:43.210: %SYS-5-RELOAD: Reload requested by lwapp image download proc. Reload Reason: Reason unspecified.
    *Jan 11 15:21:43.210: %LWAPP-5-CHANGED: LWAPP changed state to DOWN
    *Jan 11 15:21:43.216: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERYXmodem file system is available.
    flashfs[0]: 3 files, 2 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 7741440
    flashfs[0]: Bytes used: 1861632
    flashfs[0]: Bytes available: 5879808
    flashfs[0]: flashfs fsck took 14 seconds.
    Base ethernet MAC Address: e4:d3:f1:c2:88:82
    Initializing ethernet port 0...
    Reset ethernet port 0...
    Reset done!
    ethernet link up, 100 mbps, full-duplex
    Ethernet port 0 initialized: link is up
    Please Advise,
    Thanks in advanced,
    Ahmed,

    Dear Stefan,
    Many thanks for your kind reply,
    Please find the information below:
    Controller Summary
    Management IP Address
    10.114.44.131
    Service Port IP Address
    10.114.23.20
    Software Version
    7.2.111.3
    Field Recovery Image Version
    6.0.182.0
    System Name
    CIR906.WLC.5508
    Please Advise,
    Thanks,
    Ahmed,

  • WLC 5508 management interface

    Hi, I have a particular wireless design that requires one WLC 5508 to be connected to two seperate swithces. Port 1 of WLC is connected trunk to Switch A and Port 2 of WLC is connected to Switch B. Each switch has its own local VLANS. When I connect 1130s LAPs they need to find the management interface initially and then use only AP management interfaces. since there is only one management interface, if I assign management interface on a vlan that is configured on switch A then APs on switch A join fine but those on switch B keep asking for management interface and from capwap debug on WLC it says that join request was received on wrong ineterface ....
    the only work around to this was to make routing between switch A and switch B for the two vlans on which APs reside... but for security purposes - client would like to avoid this
    any help much appreciated ..

    Hi thanks for your reply,
    Yes I agree perfectly with your explanation - On both switches I have UDP forward for 5246 and 5247 and everything works fine.
    You understood exactly what's happening for initial discovery the Guest AP asks for managemnt interface through WLC port 2 but managerment IP is on admin side WLC port 1 and then it drops packet saying that it was received on the wrong port. In fact that is why I put an ACL between the Admin switch and guest switch taht allows only 5426 capwap control - just to allow that initial discovery from guest AP to contact Management interface which can only be assigned to one port and in my case it is on the admin switch side. And that is why I had to make a route between the two independent switches.
    My question is to know if there is any other way with my given design to eliminate this initial discovery to the management inetrface, as my client would like the admin and guest switches to be completely seperated i.e. without the routing. Is there any way that the guest APs can make contact with the AP management interface on their side only skipping the discovery of the management interface ? the guest APs were primed on the admin side so they know the IP. After the initial discovery, if I remove the routing between admin and guest switch, guest APs keep their connectivity without any problems.

  • LWAPP Discovery request - discarded ?

    Greetings all,
    I'm starting to grow a huge headache over a WLC-implementation (4402-12). From my point of view, the controller seems to be configured correctly and the DHCP-scope has been set up with the correct pointers as well as as the DNS-record, all pointing towards the AP-Manager i/f (tagged vlan20 on port 1, mgmt untagged) - still, no access-points will associate. The AP is pingable from the controller. A debug of lwapp events and details shows the following;
    Sat Jan 7 19:36:17 2006: Received a message from AP of length 97 on inteface = 1
    Sat Jan 7 19:36:17 2006: Entered spamGetLCBFromMac file spam_lrad.c line 433**
    Sat Jan 7 19:36:17 2006: Received LWAPP DISCOVERY REQUEST from AP 00:0b:85:5a:bd:50 to ff:ff:ff:ff:ff:ff on port '1'
    Sat Jan 7 19:36:17 2006: Discarding L3 Mode LWAPP DISCOVERY REQUEST on intf '1', vlan = '20', Management vlan = '0'.
    Anyone with a clue regarding what might be causing this? I'm also a little confused regarding the destaddr (bcast) since the AP should've received the ucast address of the controller. We have to handover this system to the cust. fairly soon .. :-)
    WLC Version: 3.2.78.0
    TIA & Best regards,
    /M

    You need to use the Management Interface for LWAPP controller discovery. That's what the WLC expects. So when it sees an LWAPP Discovery Request coming in on another interface, it discards its.
    In L3 LWAPP mode, the AP tries to find a WLC using IP subnet broadcast, over the air provisioning (OTAP), DHCP Option 43, DNS, and WLC IP addresses stored in memory. It will always use ALL of these techniques. That's why you're seeing the broadcast. From the LWAPP Discovery Responses it selects a controller to join.
    Now, you would've seen it join in L2 mode because the AP does an Ethernet "broadcast" to find the WLC. Hence, the mgmt interface sees the LWAPP Discovery, and responds with an Ethernet frame. At L2 mode, all LWAPP is Ethernet encapsulated as opposed to IP encapsulated. When you switched back to L3 mode, the AP remembers the management IP address of the WLC from the L2 join and uses that. That's why it worked after switching L3-->L2-->L3.
    Hope this helps.

  • Help with joining AP to WLC 5508 Getting error in LOG's

    I am tryign to join my first AP to the 5508 and am gettign this error int he logs.
    *Dec 07 10:42:31.067: %DTL-3-NPUARP_ADD_FAILED: dtl_arp.c:2280 Unable to add an ARP entry for 0:0.0.0 to the network processor. entry does not exist
    The management Interface is on the the same vlan as the AP , both untagged ports. the AP gets an ip address from my dhcp server.
    Any ideas?
    Thanks

    AIR-CAP3502I-A-K9
    Also here's this if useful
    Discovery phase statistics
    - Discovery requests received.............................. 114
    - Successful discovery responses sent...................... 0
    - Unsuccessful discovery request processing................ 0
    - Reason for last unsuccessful discovery attempt........... Not applicable
    - Time at last successful discovery attempt................ Not applicable
    - Time at last unsuccessful discovery attempt.............. Not applicable
    Join phase statistics
    - Join requests received................................... 0
    - Successful join responses sent........................... 0
    - Unsuccessful join request processing..................... 0
    - Reason for last unsuccessful join attempt................ Not applicable
    - Time at last successful join attempt..................... Not applicable
    - Time at last unsuccessful join attempt................... Not applicable
    Configuration phase statistics
    - Configuration requests received.......................... 0
    - Successful configuration responses sent.................. 0
    - Unsuccessful configuration request processing............ 0
    - Reason for last unsuccessful configuration attempt....... Not applicable
    --More-- or (q)uit
    - Time at last successful configuration attempt............ Not applicable
    - Time at last unsuccessful configuration attempt.......... Not applicable
    Last AP message decryption failure details
    - Reason for last message decryption failure............... Not applicable
    Last AP disconnect details
    - Reason for last AP connection failure.................... Not applicable
    Last join error summary
    - Type of error that occurred last......................... None
    - Reason for error that occurred last...................... Not applicable
    - Time at which the last join error occurred............... Not applicable
    Ethernet Mac : 00:00:00:00:00:00  Ip Address : 192.168.14.50

  • Converged Access Design Help (Catalyst 3850 and WLC 5508...Mobility Oracle)

    Hello,
    I am an engineer working with a Cisco Gold Partner in Saudi Arabia. We have a large university as our client where they are constructing a new
    building and require our services to build the network infrastructure. Therefore, we are to implement the routing and switching infrastructure as
    well as the Wireless solution.
    At present, I have no issues in implementing the R&S infrastructure as it is very straight forward but it has implications on the deployment of
    the wireless solution which I explain further below. The R&S infrastructure comprises of the typical Core, Distribution, and Access layers and we
    are focusing on the local distribution and access switches with regards to the new building. The client has a converged Layer 3 network spanning
    from distribution layer to core layer and they are running EIGRP for this convergence. This is not a problem and has already been implemented.
    Yet, the challenge arises in deploying the WLAN infrastructure. The client already has a Cisco WLAN infrastructure in place where they have a
    large number of LAPs that are registered with their controllers in the Data Center. They have two WLC 5508 where one is the Primary and the other
    the Secondary. The local distribution switch to which the WLC are connected also is the gateway for the SVIs for the SSIDs that are configured on
    the controllers. This means that once the packets from the AP come in to the WLC, they are tagged with the correct VLAN and sent to the directly
    connected distribution switch which then routes it into the rest of the Layer 3 network. Interestingly, the WLC 5508 are running AireOS 7.6 and
    support the "New Mobility" feature. The two controllers have formed a Mobility Group (MG) between each other.
    Now, the new building will have two Catalyst 3850 switches installed where each one has a total of 40 AP licenses pre-installed and activated
    i.e. a total of 80 APs can be supported by the two switches. A total of 67 LAPs will be deployed in the new building which can be accommodated
    between the two switches and their integrated controller.
    Yet, based on my understanding and research about Converged Access is that, ideally, the Catalyst 3850 will only run the Mobility Agent (MA)
    feature while a central controller would provide the Mobility Controller (MC) service. unfortunately, there are not enough licenses on the
    existing WLC 5508 nor can we migrate the new licenses that will facilitate such a split deployment.
    This means that I would need to configure the two Catalyst 3850 as independent MC and form a MG between them. I have done this and tested this
    already and the mobility is working fine. But my concern is not about getting the Catalyst 3850 to work as this is simple but rather it is
    focused on creating a common Mobility Domain (MD) so that clients can roam from this new building to the rest of the campus while maintaining the
    state of their connections to the WLAN infrastructure.
    To make things more complicated, since the new building will have its own Layer 3 distribution switch and the Catalyst 3850 switches will connect
    to this distribution switch, it means that new VLANs and SVIs need to be created for the SSIDs broadcast in the new building. This means that new
    subnets need to be assigned to the SSIDs.
    As such, I have the following questions:
    Q1) If we create new SVIs for the SSIDs (same SSIDs names will be used in the new building as in the rest of the university campus) this means
    that new subnets will be assigned to these SSIDs. Now, I believe I have two options...one is to make the new Catalyst 3850s to be in the same MG
    as the existing WLC 5508 which then cater for Layer 3 client roaming or I have to treat this as a totally seperate WLAN network and follow on to
    the solution as per the next question. Please advise which is a better option?
    Q2) I could create separate MG i.e. the new building Catalyst 3850s can be in one MG and the existing controllers can be in another MG. I can
    then have one of the existing WLC 5508 (the primary one) to run the Mobility Oracle (MO) feature so as to create a single Mobility Domain (MD).
    Would this facilitate in Layer 3 client roaming and RRM for all the controllers in the same MD?
    Q3) If I do create a MD, how is this accomplished in such an environment since the documentation is severely limited in this regard?
    Please advise at your earliest. To assist further, I have attached a topology diagram which may aid in explaining the situation with more
    clarity. If these things are clarified, I will be better able to wrap my head around the technology and in turn service my clients better.
    Regards,
    Amir

    Hi Amir,
    Q1) If we create new SVIs for the SSIDs (same SSIDs names will be used in the new building as in the rest of the university campus) this means that new subnets will be assigned to these SSIDs. Now, I believe I have two options...one is to make the new Catalyst 3850s to be in the same MG as the existing WLC 5508 which then cater for Layer 3 client roaming or I have to treat this as a totally seperate WLAN network and follow on to the solution as per the next question. Please advise which is a better option?
    I would configure them in the same mobility group. Also configure same SPG for those two 3850 stacks if users are frequently roaming within these two buildings.
    Q2) I could create separate MG i.e. the new building Catalyst 3850s can be in one MG and the existing controllers can be in another MG. I can then have one of the existing WLC 5508 (the primary one) to run the Mobility Oracle (MO) feature so as to create a single Mobility Domain (MD). Would this facilitate in Layer 3 client roaming and RRM for all the controllers in the same MD?
    MO is not required (it is only for very large scale deployments)
    Q3) If I do create a MD, how is this accomplished in such an environment since the documentation is severely limited in this regard?
    Yes, documents are hard to find :(
    These notes may be useful to you based on my experience. I am running IOS-XE 3.6.1 in my production.
    http://mrncciew.com/2014/05/06/configuring-new-mobility/
    http://mrncciew.com/2013/12/14/3850ma-with-5760mc/
    HTH
    Rasika
    *** Pls rate all useful responses ****

  • 3602i CAP unable to join WLC 5508

    Hi All,
    Hope to you a very happy new year,
    I have an (AIR-CAP3602i-E-K9) and I tried to join it to WLC 5508 but I'm facing an error,
    I get this error from the LAP 1310 console as below:
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 60:73:5c:ad:cb:9c
    Boot CMD: 'boot  flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx;flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-mx'
    Loading "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx"...#####################
    File "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx" uncompressed and installed, entry point: 0x2003000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C3600 Software (AP3G2-RCVK9W8-M), Version 15.2(2)JA, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Thu 23-Aug-12 02:43 by prod_rel_team
    Initializing flashfs...
    flashfs[2]: 6 files, 3 directories
    flashfs[2]: 0 orphaned files, 0 orphaned directories
    flashfs[2]: Total bytes: 31997952
    flashfs[2]: Bytes used: 7015936
    flashfs[2]: Bytes available: 24982016
    flashfs[2]: flashfs fsck took 9 seconds.
    flashfs[2]: Initialization complete.
    flashfs[3]: 0 files, 1 directories
    flashfs[3]: 0 orphaned files, 0 orphaned directories
    flashfs[3]: Total bytes: 12257280
    flashfs[3]: Bytes used: 1024
    flashfs[3]: Bytes available: 12256256
    flashfs[3]: flashfs fsck took 0 seconds.
    flashfs[3]: Initialization complete....done Initializing flashfs.
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    Warning:  the compile-time code checksum does not appear to be present.
    cisco AIR-CAP3602I-E-K9    (PowerPC) processor (revision A0) with 180214K/81920K bytes of memory.
    Processor board ID FCZ1642J01K
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 7.3.1.73
    1 Gigabit Ethernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 60:73:5C:AD:CB:9C
    Part Number                          : 73-14521-02
    PCA Assembly Number                  : 800-37501-02
    PCA Revision Number                  : A0
    PCB Serial Number                    : FOC16352BJ0
    Top Assembly Part Number             : 800-35852-02
    Top Assembly Serial Number           : FCZ1642J01K
    Top Revision Number                  : C0
    Product/Model Number                 : AIR-CAP3602I-E-K9
    % Please define a domain-name first.
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    logging trap emergencies
            ^
    % Invalid input detected at '^' marker.
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    logging trap emergencies
            ^
    % Invalid input detected at '^' marker.
    Press RETURN to get started!
    *Mar  1 00:00:10.355: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
    *Mar  1 00:00:11.971: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:12.575: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C3600 Software (AP3G2-RCVK9W8-M), Version 15.2(2)JA, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Thu 23-Aug-12 02:43 by prod_rel_teamlwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:13.603: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:15.387: DPAA Initialization Complete
    *Mar  1 00:00:15.387: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
    *Mar  1 00:00:15.979: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    no bridge-group 1 source-learning
                       ^
    % Invalid input detected at '^' marker.
    %Default route without gateway, if not a point-to-point interface, may impact performance
    *Mar  1 00:00:32.327: %CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C2960S-48FPD-L (10bd.18a5.6082)
    *Mar  1 00:00:48.579: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.114.42.204, mask 255.255.255.128, hostname AP6073.5cad.cb9c
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (10.114.44.129) (8.8.8.8)
    *Mar  1 00:00:59.459: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.114.44.131 obtained through DHCP
    *Mar  1 00:00:59.459: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:01:32.343: %CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C2960S-48FPD-L (10bd.18a5.6082)
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    Not in Bound state.
    *Mar  1 00:01:55.515: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
    *Mar  1 00:02:02.519: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 2 combination.
    *Mar  1 00:02:02.555: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.114.42.205, mask 255.255.255.128, hostname AP6073.5cad.cb9c
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (10.114.44.129) (8.8.8.8)
    *Mar  1 00:02:06.515: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.114.44.131 obtained through DHCP
    *Mar  1 00:02:06.515: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    Please Advise,
    Thanks in Advanced,
    Ahmed,

    Your WLC is running a 7.0.235.3.  This firmware is suitable for your 1300 but you need at least 7.2.X to run 3600.
    As I've mentioned in your other thread, you can get a refurbished 4402/4404 cheap from Cisco Refurbished.  You can use the 4400 to run your 1310 and the 5508 to run the newer APs.

Maybe you are looking for

  • Best approach for batch mode generation of large report via SSRS

    I have revised this question now that I've determined that we *will* be using the Enterprise edition of SQL Server 2012. I have a report (that I will deploy to an SSRS 2012 server) which can vary greatly in size. When the report is expected to be sma

  • Crossfade on playback

    I have set crossfade on and when i playback using itunes on my pc it works fine, but does not work when i playback through my ipod - any ideas?

  • I deleted some videos on my ipad before synching with my library, and now I can't find them.  How can i get them back?

    I deleted some videos on my ipad before synching with my library, and now I can't find them.  How can i get them back?

  • FTP SERVER DOUBT

    hi this is giri. i have one doubt. if my scenario is file to idoc.iam having legacy system, ftp server, xi server and sap r/3.now 1.how can i pull a specific file from legacy system to FTP server. is there any doc means please farward it to me .... t

  • TIMESTAMPDIFF question

    Does anyone know why I'm getting different result for the following: TIMESTAMPDIFF(SQL_TSI_MONTH, expr1, CURRENT_DATE) where expr1 = 10/15/2008. The result is 12. TIMESTAMPDIFF(SQL_TSI_MONTH, expr1, CURRENT_DATE) where expr2 = 10/31/2008. The result